CVE-2024-5483 is a sensitive information exposure vulnerability (CWE-200) in the LearnPress WordPress LMS Plugin for creating and selling online courses. The issue arises from an incorrect implementation of the get_items_permissions_check function, which fails to properly restrict access to user data. As a result, unauthenticated attackers can retrieve basic user information such as email addresses. This vulnerability affects all plugin versions up to and including 4.2.6.8. There is no indication of known exploits in the wild, and no patch or official fix information is currently provided.

The vulnerability allows unauthorized disclosure of user email addresses and potentially other basic user information, which can lead to privacy violations and facilitate phishing or social engineering attacks. There is no impact on data integrity or system availability reported. The exposure is limited to information leakage without requiring authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, administrators should consider restricting access to the affected plugin's endpoints or disable the plugin if feasible to prevent unauthorized data exposure. Monitor vendor channels for updates and apply patches promptly once released.